Senior Microsoft Sentinel / SIEM Engineer

Cloud Decisions; United Kingdom; Remote; GBP 63,000 - 75,000; Full time

Job summary

A leading company in cybersecurity seeks a Senior Microsoft Sentinel / SIEM Engineer for a fully remote position in the UK. In this role, you will contribute to forefront cybersecurity efforts involving nation-state threat actors. Successful candidates will thrive in dynamic environments and possess substantial experience with Microsoft Sentinel integrations.

Benefits

Direct access to Microsoft product teams

Flexible work culture with global collaboration

Career progression and growth opportunities

Qualifications

• Experience with Microsoft Sentinel integrations at enterprise level.
• Understanding of security telemetry across various layers.
• Experience in SIEM content development including KQL.

Responsibilities

• Own and optimize log onboarding into Microsoft Sentinel.
• Enhance custom Function Apps and ingestion pipelines.
• Partner with IR teams on real attacks for tuning detection rules.

Skills

Incident Response

Cyber Threat Detection

Log Parsing

Scripting

Tools

PowerShell

Python

REST APIs

Job description

Senior Microsoft Sentinel / SIEM Engineer

2 days ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

Cloud Decisions provided pay range

This range is provided by Cloud Decisions. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

Direct message the job poster from Cloud Decisions

Job Title:

To £75,000 + Benefits + Microsoft

Fully Remote, UK

(*Global Microsoft Managed MISA Partner

+ complex Sentinel Engineering/Integration)

The Opportunity

This is a standout opportunity for a Microsoft Sentinel expert to step into a high-impact, technically advanced role with a global security Microsoft powerhouse.

You'll be joining a Microsoft managed global partner, a prominent MISA member, a team with Security MVP's and a Microsoft Verified Safe XDR Solution Partner, and a trusted Security Depth Partner.

In short giving you unparalleled access to Microsoft’s security product roadmap, security previews, and frontline support.

You'll work at the sharp end of cyber defence, directly contributing to investigations involving nation-state threat actors (including IR, CH, and NK based campaigns) while refining your craft across enterprise-scale log ingestion and customised Sentinel integration engineering that will stretch your skills, give you opportunity to ingest complex logs from a mass of cloud and data sources and the chance to learn these as you go.

The Role

You'll own and optimise enterprise-wide log onboarding into Microsoft Sentinel – deploying standard and custom connectors, Function Apps, and parsers to build tailored SIEM solutions that drive real-world threat detection and response.

• Log ingestion at scale across numerous hybrid and multi-cloud environments
• Enhance custom Function Apps and ingestion pipelines
• Parse, normalise, and optimise log telemetry to ensure precision and cost control
• Partner with IR teams on real attacks – tuning rules against live threat actor activity
• Sync closely with Microsoft teams to build cutting-edge detection capabilities
• Contribute to internal knowledge base and help shape engineering standards

What's needed?

• Experience building and integrating complex Microsoft Sentinel at SMC and enterprise
• Understanding of security telemetry across identity, endpoint, cloud, and network layers
• Experience in SIEM content development, including KQL, analytics rules, and custom data connectors
• Scripting and engineering skills – Python, PowerShell, APIs, Function Apps
• A background in cyber threat detection, incident response or DFIR is a real plus
• Comfortable working in very fast-moving, customer facing delivery environments

The Technical Shizzle:

• PowerShell, Python, REST APIs
• Log ingestion and parsing across multi platforms (Azure/AWS/GCP, M365, Defender, Entra, Copilot, Carbon Black, Okta + Tier 1 Network vendors)
• MITRE ATT&CK, threat detection frameworks, IOC enrichment
• Ability to go and work things out is crucial
• Sentinel/Log Analytics Cost Management and Data Optimisation

What’s In It for You?

• Direct access to Microsoft Sentinel product teams and early feature previews
• Deep involvement in real-world nation-state attack detection
• Huge opportunity to stretch and sharpen you Sentinel mastery
• Be part of a Microsoft Security elite MISA and Depth partner
• Exposure to multi-cloud detection and advanced security automation
• Fully remote, highly flexible work culture with global team collaboration
• Recognition, career progression and growth all within a global Microsoft specialist and respected security consultancy

Seniority level

• Seniority level

  Not Applicable

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  IT Services and IT Consulting, Computer and Network Security, and Professional Services

Referrals increase your chances of interviewing at Cloud Decisions by 2x

Get notified about new Microsoft Specialist jobs in United Kingdom.

Speculative Applications - Electric Square

Register Your Interest: Airbus Newport Campus

Urgent! x3 Tech Leads – UK-based – Series A Funded Startup – Rapid Growth – Fully Remote

London, England, United Kingdom 4 days ago

London, England, United Kingdom 1 week ago

Brighton, England, United Kingdom 1 week ago

Nottingham, England, United Kingdom 3 months ago

Greater London, England, United Kingdom 1 month ago

Coventry, England, United Kingdom 3 months ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.